314 questions
0
votes
0
answers
27
views
Spring authorization server get access token fail
I am running a spring security oauth2 authorization server 1.5.3.
I use postman to get an access token. Following is my request body in post man:
I have double-checked the parameters, they seem OK, ...
- 1
-1
votes
1
answer
97
views
Spring Authorization Server – /login keeps returning 403 instead of showing login page [closed]
I am learning Spring Authorization Server and trying to build a simple OAuth2 Authorization Server without OpenID Connect.
i want to handle the login page myself inside the same Authorization Server ...
- 120
Best practices
0
votes
1
replies
45
views
SpringC loud Gateway and Spring Authorisation Server Common Session storage
I have a Spring Authorisation Server as my OAuth2-OpenID Connect authentication server running with multiple instances on a cluster. It uses Spring Session Redis for managing distributed sessions. ...
0
votes
0
answers
112
views
How to implement non-plain-text password transmission in Spring Authorization Server 1.4.3 (password grant extension)
I’m using Spring Authorization Server 1.4.3 to build an authentication center.
I’ve extended the authorization server to support the password grant type, so clients can obtain access tokens via the /...
- 181
0
votes
1
answer
60
views
how to save the client-id from request cache when a user is redirected to the spring authorization server?
I have implemented or extended on top of Spring Authorization server. I have a authentication controller that accesses the client-id from the RequestCache object.
Now, I have built a sample OAuth app ...
- 1,418
0
votes
0
answers
44
views
Does Spring Authorization supports FAPI 2.0
I'm trying to do a PoC on FAPI 2.0 for which I want to have an authorization server that supports FAPI2.0 along with the control over IDP integration, user database, OIDC provider and onboarding third ...
- 4,038
0
votes
0
answers
80
views
Spring OAuth2 login page doesn’t load correctly when accessed through Gateway
I’m using a Spring OAuth2 Authorization Server with a Gateway in front of it.
When I access the login page directly via http://localhost:9999 (the OAuth2 server port), everything works: the CSS loads ...
0
votes
1
answer
118
views
Spring OAuth2 Authorization Server: IllegalArgumentException when deserializing custom User class after consent approval
I'm trying to set up a Spring Authorization Server for learning purposes. The login and consent screens work, but after I approve the consent screen and submit the /authorize request, I get the ...
- 55
0
votes
1
answer
92
views
Where should roles and missions/ACLs be managed when building an authorization server?
I’m trying to build my own Spring Authorization Server (for learning purposes and possibly to use across multiple projects in the future).
I’m already familiar with Spring Security and resource server ...
- 55
0
votes
0
answers
84
views
Avoid uri='UNKNOWN' for OAuth endpoints in Spring Authorization Server
I'm using Spring Authorization Server together with Spring Boot Actuator and Micrometer Prometheus integration.
For metrics like http_server_requests_seconds_count, I’m seeing many uri="UNKNOWN&...
0
votes
0
answers
90
views
Oauth2 Logout fails when the token is refreshed using the refresh token. message: Logout request failed: [invalid_token] id_token_hint
alright gpt did not help with this one. so my problem is that logout fails when the token has been refreshed using the refresh token. spring auth server says id_token_hint has expired because it's ...
- 2,320
0
votes
0
answers
40
views
Best way to extend RegisteredClient to support a custom field (app_id) in dynamic client registration?
I'm using Spring Authorization Server with JDBC and dynamic client registration.
I want to extend RegisteredClient to support a custom field called app_id. This value is provided in the dynamic ...
- 39
0
votes
1
answer
127
views
Spring Authorization Server ~ How to unregister default AuthenticationProviders
I am trying to implement OAuth2 authentication for an App in a Spring Boot backend using Spring Authorization Server. My problem is that I have custom logic that uses its own AuthenticationProviders, ...
- 2,560
0
votes
0
answers
32
views
Spring Authorization Server - Authorizing Requests Using Established Spring Security Functionalities Not Possible?
I am trying to use Spring Authorization Server as such:
My application is providing a OIDC Provider endpoint such that it works as an authorization server for third parties (e.g. Zitadel)
But only ...
- 1
1
vote
1
answer
87
views
How to log client information upon successful client credentials flow is performed in Spring Boot Authorization Server
I want to log RegisteredClient.clientId, RegisteredClient.clientName when it performs successful client credentials flow. How can I achieve this?
Current Behavior
I checked logs (with TRACE level) ...
- 4,440
